Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/ef57e5e0-97ea-3682-9e9e-816b74e9a69f.roa
File:                     ef57e5e0-97ea-3682-9e9e-816b74e9a69f.roa (raw, json)
Hash identifier:          +9uhLn4+HUNfD28myiMsHO4DjfaQegFksgsAE4YrA30=
Subject key identifier:   CD:E9:64:22:05:7B:4F:8A:1C:30:B8:C6:D5:5C:B2:5D:D5:6B:4C:45
Certificate issuer:       /CN=8335f7cc-1a69-4b40-8900-117660939363
Certificate serial:       010D0C9F43285847C05C15B40B780A2D26CFF940
Authority key identifier: 0D:1A:4E:3F:8C:01:64:8C:90:49:62:E4:5F:91:CC:C8:57:4F:65:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/ef57e5e0-97ea-3682-9e9e-816b74e9a69f.roa
Signing time:             Sun 03 Nov 2024 01:00:36 +0000
ROA not before:           Sun 03 Nov 2024 01:00:36 +0000
ROA not after:            Sat 01 Feb 2025 02:00:36 +0000
asID:                     395865
IP address blocks:        64.93.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/8335f7cc-1a69-4b40-8900-117660939363.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/8335f7cc-1a69-4b40-8900-117660939363.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c0:5c:15:b4:0b:78:0a:2d:26:cf:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8335f7cc-1a69-4b40-8900-117660939363
        Validity
            Not Before: Nov  3 01:00:36 2024 GMT
            Not After : Feb  1 02:00:36 2025 GMT
        Subject: CN=9efb8a6e-7c8e-4382-88c5-b01abdc6d2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:37:66:27:ed:60:68:49:7f:2a:8a:59:6c:
                    8b:32:ff:2b:f8:13:3e:96:1b:31:57:ab:e0:60:7d:
                    7c:69:62:63:89:21:ca:c6:e8:72:a1:85:59:fa:fe:
                    6c:5e:3f:7e:b9:ff:fa:49:53:43:49:23:d7:54:21:
                    29:8b:bd:63:4b:80:70:b4:e8:f2:31:99:97:1a:68:
                    34:60:43:50:c9:ce:99:39:d7:8e:a6:c4:d8:50:e6:
                    28:73:50:a0:f3:6b:ce:00:33:8f:f0:1e:3b:44:87:
                    a7:b0:89:06:71:5c:e3:41:5f:d4:1f:15:ca:76:27:
                    c1:e1:aa:e1:31:5a:df:fd:59:cd:94:7c:c9:4e:41:
                    e3:62:22:6f:48:24:5e:31:bd:f9:21:44:60:8d:76:
                    fa:81:85:fc:78:eb:b2:59:d1:ee:30:b1:f7:6a:4c:
                    f3:3a:4e:b3:55:1d:e5:b4:29:b8:73:00:96:ce:7f:
                    6b:54:2a:fc:3b:1f:8d:90:10:58:f7:37:90:30:8e:
                    02:b4:ea:fe:ff:44:f9:f5:4f:6f:26:e0:09:4e:ae:
                    6d:cc:5f:27:2d:09:63:8e:21:5c:0b:8c:23:bc:72:
                    39:69:86:3c:53:88:30:42:41:7e:ad:0e:4d:82:97:
                    d9:72:b3:3b:06:bc:d7:ea:f6:0f:ff:b8:a6:db:25:
                    89:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E9:64:22:05:7B:4F:8A:1C:30:B8:C6:D5:5C:B2:5D:D5:6B:4C:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/ef57e5e0-97ea-3682-9e9e-816b74e9a69f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/8335f7cc-1a69-4b40-8900-117660939363.crl

            X509v3 Authority Key Identifier:
                keyid:0D:1A:4E:3F:8C:01:64:8C:90:49:62:E4:5F:91:CC:C8:57:4F:65:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.93.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:d1:a7:b7:fa:62:55:4c:2e:ae:bd:63:83:d3:f9:23:47:a8:
         9c:9b:41:a8:f4:fc:0b:60:1e:a2:6b:68:bc:b0:85:f5:a9:65:
         cb:fe:0d:58:08:7a:f8:71:df:15:0d:2e:52:c4:53:d6:75:a5:
         51:a9:6f:1a:93:7c:b6:37:03:79:45:a7:17:4c:d3:71:5c:2d:
         68:33:8f:92:7a:65:a9:0c:3f:62:92:4d:05:f3:10:ee:35:64:
         f0:8b:bf:47:95:3f:90:5d:6b:ec:97:7c:01:34:b0:01:7a:53:
         1b:55:c4:a0:11:70:3d:bb:14:58:0e:b8:ca:66:5b:6c:ea:ad:
         db:87:22:99:b6:d1:f2:9b:30:a8:24:05:1d:3e:4e:05:fe:56:
         38:37:80:a7:7f:1e:a6:a8:86:03:67:80:7d:c4:0c:17:cb:2c:
         7c:cc:a8:2b:dd:c0:72:06:f9:da:ca:18:cf:17:2e:d7:2e:a5:
         d1:0e:85:7a:65:43:fa:bd:78:18:dc:c5:df:ca:e0:3e:c2:93:
         86:ce:32:9e:d6:a9:56:a5:d0:88:9e:98:c6:30:66:4e:dd:5c:
         82:73:f6:5f:1e:cd:a7:9a:a1:00:c1:8f:24:cf:72:57:60:95:
         29:bd:1a:a7:e2:5c:f0:8c:65:40:e1:1f:6a:74:d6:ab:a8:4d:
         c6:47:68:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:15:51 2024 by rpki-client on console-fra.rpki-client.org